5bdfd377606d8bfa3779a524e4fd46f6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5bdfd377606d8bfa3779a524e4fd46f6
Size

181KB
MD5

5bdfd377606d8bfa3779a524e4fd46f6
SHA1

f0900a66de3358f9da92613781df655dc79fc32c
SHA256

56f25f23d2262e6af56f2c3ae3ee075ad390f7fd6291498e7cc48629e4094375
SHA512

4220ee2f46023362553eeba4d45408292ec06258c6c68da53c6b511bd6fb39f06d7dbe3edd958fca4ebfb767789e926a422f2e63760fa5fe4ac88947a5cd696b
SSDEEP

3072:QQHOC+fKTKu29MWh5FCyjk3/3vtCTAPsRPoL2cfIPXv0DVwXr7G:4Cuu2X3FCyyvoJK2pXuwX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bdfd377606d8bfa3779a524e4fd46f6

Files

5bdfd377606d8bfa3779a524e4fd46f6
.exe windows:4 windows x86 arch:x86

348eed33754bd6b69d82fea6679b82c7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GlobalGetAtomNameA
GlobalHandle
SetFilePointer
EnumResourceLanguagesA
FindFirstFileA
FindNextFileA
WriteFile
EnumResourceTypesW
GetModuleHandleA
VirtualProtect
IsDBCSLeadByte
GetSystemDirectoryW
ReadFile
GetCurrentProcessId
QueryPerformanceCounter
WideCharToMultiByte
FindClose

oleacc

LresultFromObject
CreateStdAccessibleObject
CreateStdAccessibleProxyW

newdev

UpdateDriverForPlugAndPlayDevicesW

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ